ASC War Games Filtration Phase 2021

Hi, I’m abda11atarek, our team got 2nd place in the qualification phase (FireFall) and here is my write-up for web challenges. See you at…Continue reading on Medium »
Read more...

Demystifying an XSS payload: Part 2

Yet another XSS payload reversing writeup. Hang on to learn more on event capturing & bubbling and tabindex attribute!Continue reading on Medium »
Read more...

Privilege Escalation | stealing user’s point | Bugcrowd

Hi guys! This blog is about how I found privilege escalation on a web application.Continue reading on Medium »
Read more...

BugBounty: Account Takeover via Facebook Oauth

Hi everyone, hope you all are doing good. I have not posted for a while because of my college exams and stuffs. So in this post, we are…Continue reading on Medium »
Read more...

CVE-2020–15823: Server-Side Request Forgery (SSRF) in JetBrains YouTrack

More than a year ago I discovered a misconfiguration that leads to SSRF in YouTrack, and here are detailed steps on how I did it.Continue reading on mitmLab »
Read more...

KitPloit - PenTest Tools!
tsharkVM - Tshark + ELK Analytics Virtual Machine

http://2.bp.blogspot.com/-oeGRmbS-pww/YP8ck3ud33I/AAAAAAAAoeQ/vGT16_FvVC4bNBQWcqMb8xlR1_iBCdpSgCK4BGAYYCw/w640-h320/tsharkVM_1_tshark_vm_dashboard-726339.png This project builds virtual machine which can be used for analytics of tshark -T ek (ndjson) output. The virtual appliance is built using vagrant, which builds Debian 10 with pre-installed and pre-configured ELK stack.

After the VM is up, the process is simple:

* decoded pcaps (tshark -T ek output / ndjson) are sent over TCP/17570to the VM
* ELK stack in VM will process and index the data
* Kibana is running in VM and can be accessed on http://127.0.0.1:15601/app/kibana#/dashboardsInstuctions to build VM from Ubuntu desktopClone source codegit clone https://github.com/H21lab/tsharkVM.gitBuild tshark VMvirtualbox vagrant bash ./build.sh ">sudo apt update
sudo apt install tshark virtualbox vagrant
bash ./build.sh Upload pcaps to VM# copy your pcaps into ./Trace
# run following script
bash upload_pcaps.sh

# or use tshark directly towards 127.0.0.1 17570/tcp
tshark -r trace.pcapng -x -T ek > /dev/tcp/localhost/17570Open Kibana with browserfirefox http://127.0.0.1:15601/app/kibana#/dashboardsOpen Main Dashboard and increase time window to e.g. last 100 years to see there the sample pcaps. http://2.bp.blogspot.com/-oeGRmbS-pww/YP8ck3ud33I/AAAAAAAAoeQ/vGT16_FvVC4bNBQWcqMb8xlR1_iBCdpSgCK4BGAYYCw/w640-h320/tsharkVM_1_tshark_vm_dashboard-726339.png http://4.bp.blogspot.com/-5MFJsyFUZ7I/YP8cmiWs77I/AAAAAAAAoeY/vucgRJ6Trs0P-KgAbPJOyEMpmcA4g4CzQCK4BGAYYCw/w640-h320/tsharkVM_2_tshark_vm_discover-732426.png SSH to VMcd ./VM
vagrant sshDelete VMcd ./VM
vagrant destroy defaultStart VMcd ./VM
vagrant upStop VMcd ./VM
vagrant haltSSH into VM and check if ELK is running correctlycd ./VM
vagrant ssh
sudo systemctl status kibana.service
sudo systemctl status elasticsearch.service
sudo systemctl status logstash.serviceElasticsearch mapping templateIn the project is included simple Elasticseacrh mapping template generated for the frame,eth,ip,udp,tcp,dhcpprotocols. To handle additional protocols efficiently it can be required to update the mapping template in the following way:

Elasticsearch version ruby ./Public/process_tshark_mapping_json.rb # 3. Upload file to vagrant VM cd VM vagrant upload ../Kibana/custom_tshark_mapping_deduplicated.json /home/vagrant/tsharkVM/Kibana/custom_tshark_mapping_deduplicated.json cd .. # 4. Connect to VM and upload template in the Elasticsearch cd VM vagrant ssh cd tsharkVM/Kibana curl -X PUT "localhost:9200/_index_template/packets_template" -H 'Content-Type: application/json' -d@custom_tshark_mapping_deduplicated.json "># 1. Create custom mapping, by selecting required protocols
tshark -G elastic-mapping --elastic-mapping-filter frame,eth,ip,udp,tcp,dns > ./Kibana/custom_tshark_mapping.json

# 2. Deduplicate and post-process the mapping to fit current Elasticsearch version
ruby ./Public/process_tshark_mapping_json.rb

# 3. Upload file to vagrant VM
cd VM
vagrant upload ../Kibana/custom_tshark_mapping_deduplicated.json /home/vagrant/tsharkVM/Kibana/custom_tshark_mapping_deduplicated.json
cd ..

# 4. Connect to VM and upload template in the Elasticsearch
cd VM
vagrant ssh
cd tsharkVM/Kibana
curl -X PUT "localhost:9200/_index_template/packets_template" -H 'Content-Type: application/json' -d@custom_tshark_mapping_deduplicated.json

Alternative can be using the dynamic mapping. See template ./Kibana/template_tshark_mapping_dynamic.json. And consider set[...]

___________________________
@hacking_Attack
@Hacking_Video

ting the numeric_detection parameter true/false depending on the mapping requirements and pcaps used. Upload the template into Elasticsearch in similar way as described above. Limitationstshark -G elastic-mapping --elastic-mapping-filter mapping could be outdated, it is not following properly the Elasticsearch changes and the output can be duplicated. The manual configuration and post-processing of the mapping template is required.

Program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY. LicenseThe default license of source codes provided inside this project is the Apache License v2.0. Additionally refer to individual licenses and terms of used of installed software (see licenses for Wireshark, Elastic and other). AttributionSpecial thanks to people who helped with the Wireshark development or otherwise contributed to this work:

* Anders Broman
* Alexis La Goutte
* Christoph Wurm
* Dario Lombardo
* Vic Hargrave

Example pcap in ./Traces subfolder was downloaded from https://wiki.wireshark.org/SampleCaptures

Created by Martin Kacer

Copyright 2021 H21 lab, All right reserved, https://www.h21lab.com Download tsharkVM

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
“Defend the Web” write-up (Intro 5— JavaScript prompt() function information leak)

https://cdn-images-1.medium.com/max/899/1*erP9Tw1WdxgBxcm_khJ78w.jpeg
We’ll look at the JavaScript prompt in this session. The prompt() method, like alert() and confirm() methods, is a window object method ()…

Continue reading on Purple TEAM »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HYBRID HACKER SUMMER CAMP 2021 GUIDE — Part Four: Black Hat USA

https://cdn-images-1.medium.com/max/1200/1*n1dAMZcpSpuZ9dvxNZixLA.png
Welcome to the DEFCON 201 guide to Hybrid Hacker Summer Camp! This is part of a series where we are going to cover all the various hacker…

Continue reading on Medium »

Hacking on Medium
THE BEST RECOMMENDATION IN HACKER SERVICES

https://cdn-images-1.medium.com/max/780/1*WLh5k8jLl6ZvZg6-DehMeg.jpeg
How much does it cost to hire a hacker?

Continue reading on Medium »

hacking: security in practice
Is there a program type that will auto guess random nums and letters and input them on its own

Is there a program type that will auto guess random nums and letters and input them on its own? I’ve got most of a code so now I’m trying to brute force the last digits.

submitted by /u/BonBear101
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Filemanager, website developer’s big sin.
https://medium.com/@mumeido/filemanager-website-developers-big-sin-58d1de0238e3?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

How are you guys ? I hope you are fine there and can surviv with this pandemic. This is my 2nd write up about my bug bounty journey….Lets…Continue reading on Medium » (https://medium.com/@mumeido/filemanager-website-developers-big-sin-58d1de0238e3?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Filemanager, website developer’s big sin.

How are you guys ? I hope you are fine there and can surviv with this pandemic. This is my 2nd write up about my bug bounty journey….Lets…Continue reading on Medium »
Read more...

Hacking on Medium
LA MEJOR RECOMENDACIÓN EN SERVICIOS DE HACKER

https://cdn-images-1.medium.com/max/780/1*WLh5k8jLl6ZvZg6-DehMeg.jpeg
¿Cuánto cuesta contratar a un hacker?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video